Secure by DesignSecure by Design

Secure by Design teaches developers how to use design to drive security in software development. This book is full of patterns, best practices, and mindsets that you can directly apply to your real world development. You'll also learn to spot weaknesses in legacy code and how to address them. About the Technology Security should be the natural outcome of your development process. As applications increase in complexity, it becomes more important to bake security-mindedness into every step. The secure-by-design approach teaches best practices to implement essential software features using design as the primary driver for security. About the Book Secure by Design teaches you principles and best practices for writing highly secure software. At the code level, you'll discover security-promoting constructs like safe error handling, secure validation, and domain primitives. You'll also master security-centric techniques you can apply throughout your build-test-deploy pipeline, including the unique concerns of modern microservices and cloud-native designs. What's Inside Secure-by-design concepts Spotting hidden security problems Secure code constructs Assessing security by identifying common design flaws Securing legacy and microservices architectures About the Reader Readers should have some experience in designing applications in Java, C#, .NET, or a similar language. About the Authors Dan Bergh Johnsson, Daniel Deogun, and Daniel Sawano are acclaimed speakers who often present at international conferences on topics of high-quality development, as well as security and design. Quotes A practical, actionable handbook. Not just a call to arms about treating security seriously as a design activity...it also provides a raft of real examples, worked through from design considerations to actual code listings. - From the Foreword by Daniel Terhorst-North An eye-opening look into how good design can be the best form of security. A brilliant introduction to domain-driven design and great design principles. - Jeremy Lange, Sertifi Creating secure applications is a must, and it's not a simple task. With this book, you learn a set of tools and a way of thinking that makes it a lot easier. - Eros Pedrini, Everiske, GroupBy Well-paced and thorough. Highly recommended. - Justin Calleja, Mr Green You don't just learn about writing secure--you end up with a list of highly useful good design practices. - Henrik Gering, Radiometer Medical Makes security part of the DNA of your development process. - Robert Kielty, Roki Test Driven Software.